June 2024 - sr-users - kamailio.org

[Serusers] Digest Authentication with Tenor DX
by Ashutosh Kumar 29 Apr '25

29 Apr '25

Hi, Does someone have any idea/experience with Quintum DX radius server's support for digest mode authentication. The Access-Request packets sent by SER are getting an error back. Guide. Regards, Ashutosh Kumar Chetu, Inc. Ph : 1(305) 402 6724 - Witin US Ph : 91 120 5323340 - Outside US Fax:1 (305) 832 5987 For more information, please visit http://www.chetu.com

2 1

apt-key deprecation
by tom＠tomlynn.com 11 Nov '24

11 Nov '24

When I look at the debian repositories maintained by the project, there are instructions to import the public key of the repository for apt using this command: wget -O http://deb.kamailio.org/kamailiodebkey.gpg | sudo apt-key add - which results in: Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)). gpg: no valid OpenPGP data found. Is there an alternate method that can be posted in the repository that will get better results? Thank you, TL

5 5

Getting the name of an already set onreply_route
by Denys Pozniak 14 Oct '24

14 Oct '24

Hello! Is it possible to find out the name of the onreply_route that was set before? Something like this: t_on_reply("MANAGE_REPLY"); ... if ( t_is_set("onreply_route") ) { get_onreply_route_name(); ... } -- BR, Denys Pozniak

3 5

TLS module crashes with FIPS OpenSSL
by Marat Gareev 08 Oct '24

08 Oct '24

Hello, I encountered a problem stopping Kamailio with FIPS OpenSSL: Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007ff7292380ac in OPENSSL_sk_pop () from /lib64/libcrypto.so.3 Missing separate debuginfos, use: dnf debuginfo-install kamailio-5.7.3-4816.x86_64 (gdb) bt #0 0x00007ff7292380ac in OPENSSL_sk_pop () from /lib64/libcrypto.so.3 #1 0x00007ff72914bf5b in conf_modules_finish_int () from /lib64/libcrypto.so.3 #2 0x00007ff72914c694 in CONF_modules_unload () from /lib64/libcrypto.so.3 #3 0x00007ff7291efff9 in OPENSSL_cleanup () from /lib64/libcrypto.so.3 #4 0x00007ff72954702b in ?? () #5 0x0000000100061c08 in ?? () #6 0x00007ff7190566c8 in ?? () #7 0x00007ffccf196a20 in ?? () #8 0x000000000071da8a in futex_release (lock=0x7ff729f08b50 <syslog>) at core/mem/../mem/../futexlock.h:134 #9 0x00000000006e9448 in destroy_tls () at core/tls_hooks.c:75 #10 0x000000000041f278 in cleanup (show_status=1) at main.c:594 #11 0x0000000000420af1 in shutdown_children (sig=15, show_status=1) at main.c:721 #12 0x0000000000421717 in handle_sigs () at main.c:752 #13 0x0000000000430c88 in main_loop () at main.c:1988 #14 0x0000000000439d13 in main (argc=14, argv=0x7ffccf1973f8) at main.c:3212 (gdb) Environment: Oracle Linux Server 9.3 Kamailio 5.7.3 yum list --installed | grep ssl openssl.x86_64 10:3.0.7-24.0.3.el9_fips @tools openssl-libs.x86_64 10:3.0.7-24.0.3.el9_fips @tools openssl-pkcs11.x86_64 0.4.11-7.el9 @anaconda xmlsec1-openssl.x86_64 1.2.29-9.el9 @AppStream What can I do for further investigation? Thanks

5 12

TLS module doesn't support TLSV1
by o.atef＠fiberme.com 15 Aug '24

15 Aug '24

Hello Brothers, I've installed kamailio throw "apt install" on Debian and it's installed version: kamailio 5.6.3 (x86_64/linux). Now I've a big problem that kamailio cannot running with TLSv1 and it has to be TLSv1.2+ as tls.cfg doc said: # We do not enable anything else than TLSv1.2+ # over the public internet. Clients do not have # to present client certificates by default. How could I avoid this restriction please to enable TLSv1? Thank you,

5 5

http_async_query on carrierfailureroute changes rd back to carrieroute primary
by Maharaja Azhagiah 07 Aug '24

07 Aug '24

Hi I am running kamailio 5.4 on debian I have carrierfailureroute configured incase of primary service provider fails. I also have Stirshaken configured to add Identity header on outbound calls. Issue is when call fail overs to carrierfailureroute, http_async_query changes $ru to the primary carrier From the debug logs, when primary carrier sends a 488 (primary carrier expects SIP TLS but my call is UDP - to test the failover scenario) 39(285) DEBUG: {1 18398 INVITE 8EmmsLqNuMRYBduMqFgX3w4JHAn4C2xn} tmx [t_var.c:561]: pv_get_tm_reply_code(): reply code is <488> 39(285) DEBUG: {1 18398 INVITE 8EmmsLqNuMRYBduMqFgX3w4JHAn4C2xn} carrierroute [cr_func.c:178]: set_next_domain_on_rule(): searching for matching routing rules39(285) INFO: {1 18398 INVITE 8EmmsLqNuMRYBduMqFgX3w4JHAn4C2xn} carrierroute [cr_func.c:197]: set_next_domain_on_rule(): next_domain is 47987 Carrier route rewrites the failover carrier 39(285) INFO: {1 18398 INVITE 8EmmsLqNuMRYBduMqFgX3w4JHAn4C2xn} carrierroute [cr_func.c:706]: cr_do_route(): uri 14371234567 was rewritten to sip:14371234567@sip.primaryprovider.com, carrier 1, domain 47987 Before http_async_query rd and ru are still the failover carrier 39(285) INFO: {1 18398 INVITE 8EmmsLqNuMRYBduMqFgX3w4JHAn4C2xn} <script>: [callid: 8EmmsLqNuMRYBduMqFgX3w4JHAn4C2xn] - [cfg:2976] - Debug testing ----- rd is sip.primaryprovider.com ----- ru is sip:14371234567@sip.primaryprovider.com 39(285) DEBUG: {1 18398 INVITE 8EmmsLqNuMRYBduMqFgX3w4JHAn4C2xn} http_async_client [async_http.c:469]: async_send_query(): transaction suspended [5261:1830449764] 39(285) DEBUG: {1 18398 INVITE 8EmmsLqNuMRYBduMqFgX3w4JHAn4C2xn} http_async_client [async_http.c:625]: async_push_query(): query sent [ https://authn-uat.ccid.neustar.biz/ccid/authn/v2/identity?apiKey=randomkey] (0x7fdcad097e60) to worker 1 However, when the route is being called after the http_async_query it changes to the primary one: 26(272) DEBUG: tm [t_lookup.c:1612]: t_lookup_ident_filter(): transaction found 26(272) DEBUG: http_async_client [async_http.c:235]: async_http_cb(): resuming transaction (5261:1830449764) 26(272) DEBUG: tm [t_lookup.c:1612]: t_lookup_ident_filter(): transaction found 26(272) INFO: <script>: [callid: 8EmmsLqNuMRYBduMqFgX3w4JHAn4C2xn] - [cfg:2995] - Debug testing ----- rd is 1.2.3.4 ----- ru is sip:14371234567@1.2.3.4:5061;transport=TLS Due to this, call keeps going to the primary and it fails if ( http_async_query(STIRSHAKEN_AS_URL, "AS_RESPONSE") == -1 ) { xlog("L_ERR ", "[cfg:$cfg(line)] Failed to connect AS service for token $fu -> $tu \n"); return; } route[AS_RESPONSE] { xlog("L_INFO", "[callid: $ci] - [cfg:$cfg(line)] - Debug testing ----- rd is $rd ----- ru is $ru\n"); if ($http_ok) { xlog("L_INFO", "[cfg:$cfg(line)] Resuming outbound call transaction for $fu -> $tu Received - $http_rb \n"); # Add identity and Date headers if (jansson_get("identity", $http_rb, "$var(identity)")) { insert_hf("Identity: $var(identity)\n", "Content-Length"); } if (jansson_get("date", $http_rb, "$var(date)")) { if ($hdr(Date) != $null){ remove_hf("Date"); } insert_hf("Date: $var(date)\n", "Identity"); } } else { xlog("L_ERR", "[cfg:$cfg(line)] Resuming outbound call transaction. Error - $http_err)\n"); } route(RELAY); exit; } Please help to understand why rd / ru changes to primary carrier. Regards, Maharaja Azhagiah

3 7

Dns record not alone?
by Pyry Aaltonen 17 Jul '24

17 Jul '24

Hi, I recently updated my testing env to 5.8.1 and after that I’ve been receiving dns_cache.c warning “record not alone”. I found out that it’s been added to quite recent commit: https://github.com/kamailio/kamailio/commit/d8a35b3b6c837b36779e232b65fce61… And that’s probably the why I haven’t seen it before. As far as I know, I have no other problem with dns or anything else than the warning appearing in the logs 😊 I can’t quite get what the warning is about? Clearly refers to dns queries, and with debug I found out that maybe its somehow related to ip which has several domains to pointing it (and queried by one of those domains by this kamailio). Can it be something with the PTR-record? And this warning comes ones every hour, so probably when some ttl expires, and meanwhile the cache is ok with the situation. And as a background, I haven’t done any specific dns-configurations in my config, so settings should be pretty much in defaults. Any advice what I should fix here to get the warning disappear? -Pyry

2 1

Intercepting OPTIONS from nathelper
by Denys Pozniak 10 Jul '24

10 Jul '24

Hello! I need advice on how to intercept local SIP OPTIONS requests from the nathelper module for some adjustments? As far as I tested, it does not fall into the *event_route[tm:local-request]* Thanks in advance! # kamailio -v version: kamailio 5.7.1 (x86_64/linux) 1cf389-dirty -- BR, Denys Pozniak

2 5

Contact does not exist in PCSCF usrloc error in log
by Shantanu K Roy 03 Jul '24

03 Jul '24

Hello, We are trying to integrate Kamailio as the IMS server with our 5G core emulator by following the steps listed out at https://open5gs.org/open5gs/docs/tutorial/02-VoLTE-setup/. In our case, we have our own 5G core emulator instead of the Open5GS core. We are using sipp scripts to generate the SIP calls. The PCRF component of the 5G core is emulated by us and is capable of handling Diamater calls from Kamailio over the Rx interface. We have got the setup working to the point where the SIP Register calls are landing on the PCSCF which in turn is sending out AA Requests to PCRF and the PCRF is responding. However there is an internal error in the Kamailio log "4(3682133) ERROR: ims_qos [ims_qos_mod.c:1305]: w_rx_aar_register(): This contact does not exist in PCSCF usrloc - error in cfg file" Please help us in identifying if we are missing anything in the Kamailio set up. The packet capture and syslog excerpts from the VM where Kamailio is running are attached; here we are trying to perform SIP Registration for three SIP endpoints 001010123456791, 001010123456792 and 001010123456793. If there is any additional information required, please let us know. Regards, Shantanu Kumar Roy

3 6

Releasing v5.6.6
by Daniel-Constantin Mierla 03 Jul '24

03 Jul '24

Hello, I am considering to release Kamailio v5.6.6 (out of branch 5.6) later this week (likely on Wednesday, July 3, 2024). If anyone is aware of issues not yet on the bug tracker, report them there asap in order to have a better chance to be fixed. This is going to be the last release out of branch 5.6 to mark the end of official/packaging maintenance. Cheers, Daniel -- Daniel-Constantin Mierla (@ asipto.com) twitter.com/miconda -- linkedin.com/in/miconda Kamailio Consultancy, Training and Development Services -- asipto.com

1 1

Releasing v5.7.6
by Daniel-Constantin Mierla 02 Jul '24

02 Jul '24

Hello, I am considering to release Kamailio v5.7.6 (out of branch 5.7) on Tuesday, July 2, 2024. If anyone is aware of issues not yet on the bug tracker, report them there asap in order to have a better chance to be fixed. Cheers, Daniel -- Daniel-Constantin Mierla (@ asipto.com) twitter.com/miconda -- linkedin.com/in/miconda Kamailio Consultancy, Training and Development Services -- asipto.com

1 1

SRV in advertise?
by David Villasmil 01 Jul '24

01 Jul '24

Hello guys, I'm trying to use an SRV as an advertised address but kamailio fails to start. Is this not possible? Thanks, David Villasmil email: david.villasmil.work(a)gmail.com

4 7

SecSIPID Assistance
by Blake Ivey 01 Jul '24

01 Jul '24

Hi everyone. Wanting to see if someone could point me in the right direction. Still very knew to Kamailio but I am beginning to understand it better. I'm making an outbound proxy and have everything working well besides stir/shaken. I'm looking at the module page and have went back and forth with chatGPT and can't seem to figure this part out. I keep getting errors on the modparam lines. Obviously this is a self signed cert because I'm just testing. I am able to reach and download the cert from the Web server. Thank you for any assistance. # SECSIPID for Stir/Shaken modparam("secsipid", "private_key", "/etc/kamailio/secsipid/private.key") modparam("secsipid", "certificate", "/etc/kamailio/secsipid/cert.crt") modparam("secsipid", "authority_cert", "/etc/kamailio/secsipid/ca.crt") modparam("secsipid", "expire", 600) modparam("secsipid", "timeout", 2) route[STIRSHAKEN] { if (is_method("INVITE")) { if (!secsipid_add_identity("$fU", "$rU", "A", "", " http://myIPaddress.com/stir_shaken_cert.crt <http://myipaddress.com/stir_shaken_cert.crt>", "/etc/kamailio/secsipid/private.key")) { xlog("L_ERR", "Failed to sign call with ID: $ci - From: $fU\n"); send_reply("500", "Internal Server Error"); exit; } else { xlog("L_INFO", "Successfully signed call with ID: $ci - From: $fU\n"); } } # Relay the call after signing route(RELAY); }

3 8

removing Via Header with received=
by mosbah abdelkader 30 Jun '24

30 Jun '24

Hello All, I am trying to build a simple proxy that forwards SIP requests to a remote portaone server. But, kamailio is adding a Via header with received=@IP to replies got from portaone. How to disable this behavior as Asterisk (client in my setup) is not accepting this header. Thank you.

1 0

misctest module not found in kamailio debian packages
by Patrick Karton 29 Jun '24

29 Jun '24

Hello, how do i get misctest module in debian packages ? it seems not included in a package. is compilation the only way to get it ? im using kamailio 5.7.5 on debian (bullseye) 11.8 version: kamailio 5.7.5 (x86_64/linux) flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, MEM_JOIN_FREE, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: unknown compiled with gcc 10.2.1 Thanks.

1 0

Ubuntu 24.04 Packages for Kamailio 5.8 on deb.kamailio.org
by Xenofon Karamanos 28 Jun '24

28 Jun '24

Any news on regarding the availability and status of Kamailio packages for Ubuntu 24.04 on the official Kamailio repository at deb.kamailio.org. Are there any plans to support this version of Ubuntu with updated packages? If so, is there an estimated timeline for when these packages might become available? Thanks, Xenofon ________________________________ From: Xenofon Karamanos via sr-dev <sr-dev(a)lists.kamailio.org> Sent: Wednesday, June 19, 2024 11:51 To: sr-dev(a)lists.kamailio.org Cc: Xenofon Karamanos <xk(a)gilawa.com> Subject: [sr-dev] Ubuntu 24.04 Packages for Kamailio 5.8 on deb.kamailio.org Hey everybody, While attempting to use the official Ubuntu package for Kamailio version 5.7.4 on Ubunut 24.04, we encountered an issue where TLS functionality does not seem to work as expected but 5.8 branch does. Given this, I am inquiring about the availability and status of Kamailio packages for Ubuntu 24.04 on the official Kamailio repository at deb.kamailio.org. Are there any plans to support this version of Ubuntu with updated packages? If so, is there an estimated timeline for when these packages might become available? Thank you in advance for your assistance. Best regards, Xenofon

1 0

replies using the wrong protocol
by sarah.martin＠nextiva.com 27 Jun '24

27 Jun '24

I am extremely new at this, but trying to set up TLS with a carrier. TLS connection is good, Invite goes out, we get the 100 and the 200, but subsequent messages (ACK and BYE) are being sent with UDP and I cannot figure out how to get them to maintain the TLS transport. Any suggestions? I think this is the section I'm looking for. # Manage incoming replies in transaction context onreply_route[MANAGE_REPLY] { xdbg("incoming reply\n"); if(status=~"[12][0-9][0-9]") { route(NATMANAGE); } if (has_body("application/sdp")) { xdbg("rtpengine_manage loop-protect MANAGE_REPLY"); #rtpengine_manage("loop-protect"); } }

6 21

Kamailio cannot forward request - invalid sendtoparameters
by serkan celik 27 Jun '24

27 Jun '24

Hi all, I face a problem when trying to forward an UPDATE request to the IMS which communicates with UDP transport protocol on one side UDP and SCTP on other side. When I try to send UPDATE towards the UDP side of IMs I see following error on kamailio side and request cannot be forwarded Jun 25 16:19:18 prashant-0lk-sbc-1 /usr/sbin/kamailio[1223341]: ERROR: <core> [core/udp_server.c:597]: udp_send(): sendto(sock, buf: 0x7fc180deb5f0, len: 1509, 0, dst: (172.18.0.20:5060), tolen: 16) - err: Invalid argument (22) Jun 25 16:19:18 prashant-0lk-sbc-1 /usr/sbin/kamailio[1223341]: CRITICAL: <core> [core/udp_server.c:603]: udp_send(): invalid sendtoparameters#012one possible reason is the server is bound to localhost and#012attempts to send to the net The UPDATE message which is tried to be forwarded is as follow: Here there are double rr one is UDP and one is sctp (Route: < sip:mt@172.18.0.20;lr;did=6aa.aaa;ftag=49IZjY2irfb;r2=on>, < sip:mt@172.18.0.20;lr;transport=sctp;did=6aa.aaa;ftag=49IZjY2irfb;r2=on>) ) That would be great if you can help why this UPDATE cannot be forwarded. By the way double rr is on on kamailio config Jun 25 16:19:18 prashant-0lk-sbc-1 /usr/sbin/kamailio[1223341]: DEBUG: <core> [core/forward.c:577]: forward_request(): Sending:#012UPDATE sip:alice@10.10.141.188;ob;sbc-id=xpllrk47odqh4pb2ofpib6vsym SIP/2.0#015#012Via: SIP/2.0/UDP 127.0.0.1:50601;branch=z9hG4bKddab.3554948ce3cfe321729448a2b082c2f3.0#015#012Via: SIP/2.0/UDP 127.0.0.1:7060;branch=z9hG4bKnHN8Q3ya#015#012To: < sip:alice@ims.wingcon.com>;tag=49IZjY2irfb#015#012From: < sip:bob@ims.wingcon.com>;tag=hfdqjj2pmui#015#012Call-Id: 3mzzecWt3Cbgvy#015#012CSeq: 1 UPDATE#015#012Max-Forwards: 70#015#012Contact: <sip:bob@10.10.141.188;ob;sbc-id=o7dpxe7qu2r34zwzio5pis2vqi>#015#012Content-Type: application/sdp#015#012Route: <sip:mt@172.18.0.20;lr;did=6aa.aaa;ftag=49IZjY2irfb;r2=on>, <sip:mt@172.18.0.20;lr;transport=sctp;did=6aa.aaa;ftag=49IZjY2irfb;r2=on>, < sip:mo@172.18.0.20;lr;did=6aa.9aa;ftag=49IZjY2irfb;r2=on>, < sip:mo@172.18.0.20;lr;transport=sctp;did=6aa.9aa;ftag=49IZjY2irfb;r2=on>, < sip:mo@172.18.0.120;lr>#015#012Session-Expires: 180;refresher=uas#015#012Supported: replaces, 100rel, timer, norefersub#015#012Min-SE: 90#015#012P-Charging-Vector: icid-value=e277783432fd11efba03fa163eed425f;icid-generated-at=172.18.0.120;orig-ioi=172.18.0.120;term-ioi=172.18.0.120#015#012User-Agent: PJSUA v2.14 Linux-5.4.0.172/x86_64/glibc-2.35#015#012Content-Length: 409#015#012#015#012v=0#015#012o=- 3928313948 3928313950 IN IP4 172.18.0.120#015#012s=pjmedia#015#012b=AS:84#015#012t=0 0#015#012a=X-nat:0#015#012m=audio 30106 RTP/AVP 8 96 97 121 120#015#012c=IN IP4 172.18.0.120#015#012b=TIAS:64000#015#012a=ssrc:1986855169 cname:1fca52e812ced466#015#012a=rtpmap:8 PCMA/8000#015#012a=rtpmap:96 AMR/8000#015#012a=rtpmap:97 AMR-WB/16000#015#012a=rtpmap:121 telephone-event/16000#015#012a=fmtp:121 0-16#015#012a=rtpmap:120 telephone-event/8000#015#012a=fmtp:120 0-16#015#012a=sendrecv#015#012a=rtcp:30107#015#012. Regards Serkan

1 0

Handling final response retransmissions after a reInvite
by hollis.rhonda＠gmail.com 26 Jun '24

26 Jun '24

I have a scenario where Kamailio is receiving a retransmit of a 200 OK to a late offer INVITE after it has sent the ACK, and after it has begun to handle a reInvite from the calling party. This results in the following commands to the rtpengine: Offer (reInvite), Offer (200 retransmit), Answer (ACK to retransmitted 200). At this point, I see STUN binding errors both in Chrome, where the webRTC client (called party) is running, and in the rtpengine logs. ERROR:port.cc(498)]: Received STUN BINDING error response: class=4 number=1 reason='Unauthorized' [core] STUN authentication mismatch from x.x.x.x:63396 [ice] Received ICE/STUN response code 487 for candidate pair dl2efuRG06eK4nFs:2713745946:1 from x.x.x.x::64509 to x.x.x.x [ice] ICE role change, now controlled [ice] Recalculating all ICE pair priorities [ice] Triggering check for dl2efuRG06eK4nFs:2713745946:1 [ice] ICE/STUN response with unknown transaction received (from x.x.x.x:64509 on interface x.x.x.x:16184) So, briefly, the call flow up to the point of error looks like this: INVITE w/o SDP 200 OK w/SDP, Offer to rtpengine ACK w/SDP, Answer to rtpengine reInvite w/SDP, Offer to rtpengine retransmission of 200 OK, Offer to rtpengine ACK to retransmitted 200, Answer to rtpengine I have dialog tracking enabled in my config, and it seems like Kamailio is behaving as expected when the retransmitted 200 and ACK are forwarded on, but I'm curious if other people have run into a scenario like this and how they have dealt with it.

1 0

Need help on how to implement presence_xml
by Michel Pelletier 25 Jun '24

25 Jun '24

Hello, I need to implement Event: presence, application/pidf+xml as described in RFC-3856. I understand I need to use the presence_xml module and generate PUBLISH requests to update the information and ensure that the NOTIFY get sent. I know nothing abour XCAP or wether I need it or not. Any information source out there that could help me? Regards, Michel Pelletier

1 0

TLS: client doesn't check certificate CN
by Marat Gareev 20 Jun '24

20 Jun '24

Hello, I noticed that Kamailio can route either to IP and FQDN. This means the server certificate CN is not checked by the client. How to enable something like the 'verify_peer' option? Thanks

1 0

Possibility to print values of Core Keywords in Kamailio configuration file
by sadik.oualla.mohamed＠gmail.com 20 Jun '24

20 Jun '24

Hello everyone, I have a question regarding the usage of core keywords, specifically the possibility of printing their values in log messages. While I understand that core keywords such as 'dst_port' and 'af' etc... can be accessed directly in if conditions, I am interested to know if there is a way to print the values of these core keywords for logging purposes. Thank you.

4 6

Re: exec concurrency
by Jon Bonilla (Manwe) 19 Jun '24

19 Jun '24

El Wed, 19 Jun 2024 11:54:05 -0500 Brett Nemeroff <brett(a)voicefoxtelephony.com> escribió: > What you should expect using this method is blocking while the exec runs > which could run you out of child processes while they complete. I'd also > expect to see an "unusual amount of CPU activity" which will be the result > of the forked shells being created and destroyed. > > All of that being said, yes it works. It's architecturally overly simple > and very inefficient. If your load is tiny, it might be ok. Anything > moderate like Henning and others have said, will use an inordinate amount > of cpu. I would not personally risk it. > > Thank you Brett, Henning and Alex Sadly the load won't be tiny and cannot risk it. For now I'll deploy a local nginx and fpm to run the scripts, which are in php, and will use the http_async method. Sadly we have to "http all the things" nowadays. Let's see if I'm able to write down all the logic tomorrow and do some testing. cheers, Jon -- PekePBX, the multitenant PBX solution https://pekepbx.com

1 0

Adding custom headers to HTTP server response xhttp
by Sasivarunan 19 Jun '24

19 Jun '24

HI Team, I use tls and xhttp module to enable websocket interface for webrtc client to connect. I wanted to add "Strict-Transport-Security" header to xhttp response to add security. But currently I don't see a way to add it anywhere. I can see only server_header as an option, But this will get added to SIP messages as well. It 'd be great if anybody has a suggestion around this. Thanks Varunan

2 2

Re: exec concurrency
by Jon Bonilla (Manwe) 19 Jun '24

19 Jun '24

El Tue, 18 Jun 2024 13:54:41 -0500 Brett Nemeroff <brett(a)voicefoxtelephony.com> escribió: > Just want to add that exec is heavy and slow. I would not recommend it. > > Is there a reason you want to do this over http-ifying your script and > using async? > > Not really. The scripts are provided. Maybe I'm against "http all the things" which seems to be what everyone does nowadays. Why would http client be lighter than executing a script? That would be a design problem, right? -- PekePBX, the multitenant PBX solution https://pekepbx.com

2 1

exec concurrency
by Jon Bonilla (Manwe) 18 Jun '24

18 Jun '24

Hi all I've been working with async http client and async db queries in the past but now I have to execute scripts and store the return values in avps. Since I have no experience with that, I wonder how to achieve concurrency with that scenario. Is there a way to exec async or suspend until the exec has finished and resume later? cheers, Jon -- PekePBX, the multitenant PBX solution https://pekepbx.com

2 2

Psresence dialoginfo question
by Stefan Mititelu 17 Jun '24

17 Jun '24

Hello, I am doing BLF but I want different users to be able to setup different dialog info initial states. My question is if there's an already implemented way for doing that? I've looked over docs and C code so far and this is what I've found: 1. modparam("presence_dialoginfo", "force_dummy_dialog", 1) => will force sending initial NOTIFY with dialog state "terminated" 2. Function calls: dlginfo_agg_nbody()->dlginfo_agg_nbody_empty() which will build the pre-defined xml body with that "terminated" state. If not implemented so far, maybe this can be used to set a different initial state for a user (e.g. export a cfg function or take that info from DB?) Any opinions on this? Thank you, Stefan

2 2

db_mysql startup warnings
by Juha Heinanen 17 Jun '24

17 Jun '24

When I start Kamailio master version that has been build on Debian 12 with default-libmysqlclient-dev depending on libmariadb-dev-compat, I get several warnings like this: 2024-06-17T14:48:27.702827+03:00 siika /usr/bin/sip-proxy[297246]: WARNING: db_mysql [km_my_con.c:187]: db_mysql_new_connection(): opt_ssl_ca option not supported by mysql version (value (null)) - ignoring How can I prevent them? -- Juha

1 1

How to Check Source Port in Application Layer with Kamailio
by sadik.oualla.mohamed＠gmail.com 16 Jun '24

16 Jun '24

Hello kamailio lovers, I am currently working on a Kamailio configuration where I need to check the source port of incoming SIP messages. Initially, I used the $sp pseudo-variable to get the source port, which worked perfectly while testing with SIPp. Here is the snippets code that I use " if ($sp != 5080 && $sp != 8080 && $sp != 5060){ sl_send_reply(403, "forbidden"); xlog("this $rm received, is forbidden\n"); exit; } " However, I encountered an issue when I switched to using sipsak for testing. It seems that sipsak uses a randomly assigned port for the actual network connection, even though it sets the source port in the SIP headers (e.g., Via, To and Contact headers) to a specified port using the -l option. Here is the sipsak command that I use "sipsak -vv -s sip:jack@192.168.1.2:5060-l 5080" My goal is to have Kamailio check the source port as specified in the application layer, rather than the transport layer port (i.e., the ephemeral port assigned by the OS randomly like 54691, 33017...). Could anyone guide me on how to properly configure Kamailio to extract and check the port from the application layer or SIP headers, or am I doing this in the wrong way? Any advice or examples would be greatly appreciated. "I am not a native english speak, so I use chatGPT to make my questions clear" Thank you!

1 0

topos module issue on hangup
by Arun K R 13 Jun '24

13 Jun '24

Hello, I am using topos module to hide Record-Route and Route header as per the requirement from carrier. But the topos module hides, contact, via and routing headers also. Due to this reason when I am getting bye from the carrier I am not able to route the bye back to the agent. Bye from Agent to carrier is working fine. Bye from carrier to my internal network interface is not routing to client through public interface. I assume this may be because Via / Contact header has been hidden and changed by the topos module with the invite please help me for this Thanks Arun

3 5

Kamailio v5.8.2 Released
by Daniel-Constantin Mierla 12 Jun '24

12 Jun '24

Hello, Kamailio SIP Server v5.8.2 stable release is out. This is a maintenance release of the latest stable branch, 5.8, that includes fixes since the release of v5.8.1. There is no change to database schema or configuration language structure that you have to do on previous installations of v5.8.x. Deployments running previous v5.8.x versions are strongly recommended to be upgraded to v5.8.2. For more details about version 5.8.2 (including links and guidelines to download the tarball or from GIT repository), visit: * https://www.kamailio.org/w/2024/06/kamailio-v5-8-2-released/ RPM, Debian/Ubuntu packages will be available soon as well. Many thanks to all contributing and using Kamailio! Cheers, Daniel -- Daniel-Constantin Mierla (@ asipto.com) twitter.com/miconda -- linkedin.com/in/miconda Kamailio Consultancy, Training and Development Services -- asipto.com

1 0

Releasing v5.8.2
by Daniel-Constantin Mierla 12 Jun '24

12 Jun '24

Hello, I am considering to release Kamailio v5.8.2 (out of branch 5.8) on Wednesday, June 12, 2024. If anyone is aware of issues not yet on the bug tracker, report them there asap in order to have a better chance to be fixed. Cheers, Daniel -- Daniel-Constantin Mierla (@ asipto.com) twitter.com/miconda -- linkedin.com/in/miconda Kamailio Consultancy, Training and Development Services -- asipto.com

2 2

New features in v.5.8
by Leonid Fainshtein 10 Jun '24

10 Jun '24

Hi, In the "Kamailio v5.8.0 Release Notes" I see: "SIP overload control support for server (RFC7339)". Where can I find some more details about the feature? Also, the similar question about the new "influxdbc" module. What are the possible use cases for this module? Thank you, Leonid Fainshtein Xorcom Ltd

2 2

handling 300 redirect requests
by Rob Green 09 Jun '24

09 Jun '24

I am trying to proxy a request from server A to server C with me being server B. i send the invite from A to B, then i need to send to server R which returns back to me a 300 redirect, which i then need to take the answer from the Contsct and then proxy the original invite from A to C. server A can not handle 3xx responses and must be proxied. I havent been able to find any examples where the 300 is intercepted and a new invite to the target is sent. i have the following code but it results in no new INVITE and the original session is hung until it is canceled. Any idea what i may be doing wrong? In the example below i am just hardcoding the uri for the new invite instead of getting from the Contact as a debug exercise. I am using Kamailio 5.7.3 route[HANDLEREDIRECT] { xlog("L_INFO", "DBG: HANDLEREDIRECT"); msg_apply_changes(); $var(test) = $hdr(Contact); xlog("L_INFO","DBG: redirect headers [$var(test)]: from=[$fu] from_user=[$fU], to=[$tu] to_user=[$tU]"); # send to gateway $var(new_uri) = "sip:" + $tU + "@" + "gateway"; if ($var(new_uri) != "") { xlog("DBG: Redirecting to: $var(new_uri)\n"); $ru = $var(new_uri); $tu = $ru; record_route(); route(RELAY); exit; # i have also tried using #t_newtran(); # and #t_relay(); } else { xlog("DBG: No contact header found in 300 response\n"); } } # Manage outgoing branches branch_route[MANAGE_BRANCH] { xdbg("DBG: new branch [$T_branch_idx] to $ru\n"); xlog("L_INFO", "DBG: manage branch"); route(NATMANAGE); return; } onreply_route[MANAGE_REPLY] { xdbg("DBG: incoming reply\n"); xlog("L_INFO", "DBG: manage reply"); if (t_check_status("3[0-9][0-9]")) { xlog("L_INFO", "DBG: got 3xx redirect"); route(HANDLEREDIRECT); drop; } return; } I also tried using uac_redirect module, but it stalls the incoming invite also, and i cant figure out how to modify the uri from the contact before sending (to add params) # Manage failure routing cases failure_route[MANAGE_FAILURE] { route(NATMANAGE); if (t_is_canceled()) exit; if (t_check_status("3[0-9][0-9]")) { xlog("L_INFO", "DBG: following 3xx redirect"); get_redirects("3:1"); t_relay(); exit; } } Rob Green Chief Information Officer (CIO) Tel: 1-352-218-1490 Cell: 1-407-620-0932 Email: rob.green(a)nuwave.com Web: www.nuwave.com This communication is the Property of NUWAVE Communications and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in Error, Please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

2 2

Setting Key/Value Pairs at Dialogue Level
by Pavan Kumar 08 Jun '24

08 Jun '24

Hi everyone, I am creating a dialogue when I receive INVITE. Is there a way to set key/value pair like attributes at dialog level, so that, when I receive BYE message I can retrieve that information and do some processing? Thank you, Pavan Kumar

2 2

Recommendation for a signaling B2BUA to work with Kamailio on Ubuntu
by Benoît Panizzon 07 Jun '24

07 Jun '24

Hi I wonder if anyone could maybe recommend what to use as signaling B2BUA to work with Kamailio to handle spiralling / looping calls and to reduce the number of Route, Via Header and message size, which cause issue with a large number of CPE. Requirements: * New CallID needs to be generated * Handling Route and Via * ~ 2000 concurrent calls. * Preserving custom SIP X- header * Routing NOTIFY for MWI etc. Handling RTP is not required! What I have been looking at more closely: = FreeSwitch = Got stuck trying to solve the dependencies to get it to run/build on ubuntu jammy. Has anyone experience in running it in a docker container? Will it perform? = Sippy = Very small, very simple, unfortunately removes customer SIP headers and does not forward NOTIFY. (It's python, so maybe this could be easily implemented/fixed). = SEMS = Does not seem to be actively developed in the last, couple of years. Looks quite bloated to me for what I need. = Asterisk = Each customer header has to be copied, wants to handle RTP and bridge by issuing Re-Invites. Not sure how to route stuff like NOTIFY. Also from experience I fear asterisk would translate sip reply codes (like 608 and 607) it does not know to some 4XX default. -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

4 3

Filtering codes in db acc
by Jon Bonilla (Manwe) 06 Jun '24

06 Jun '24

Hi all I'm trying to make kamailio not to insert a row in missed_calls table when reply code is 407. But even if I set the "failed_filter" modparam the 407 row is inserted. The acc mmodparams are: modparam("acc", "db_table_acc", "kam_acc") modparam("acc", "db_flag", FLT_ACC) modparam("acc", "db_missed_flag", FLT_ACC_MISS) modparam("acc", "db_url",DBURL) modparam("acc", "db_insert_mode", 1) modparam("acc", "time_mode", 2) modparam("acc", "time_attr", "time_hires") modparam("acc", "failed_filter", "401,407") modparam("acc", "db_extra", "whatever" db is mysql. Kamailio version is 5.7.4 When I send a call that receives a 407 and after auth a 480 y get both rows in missed_calls table. Log: DEBUG: acc [acc_mod.c:404]: mod_init(): acc db table initialized to: kam_acc DEBUG: acc [acc_mod.c:362]: parse_failed_filter(): failed_filter 0 = 401 DEBUG: acc [acc_mod.c:362]: parse_failed_filter(): failed_filter 1 = 407 DEBUG: acc [acc_logic.c:721]: tmcb_func(): acc callback called for t(0x7f7cec807480) event type 512, reply code 407 DEBUG: acc [acc_logic.c:443]: should_acc_reply(): probing acc state - code: 407 flags: 0x220 DEBUG: acc [acc_logic.c:449]: should_acc_reply(): failed acc is off DEBUG: acc [acc_logic.c:721]: tmcb_func(): acc callback called for t(0x7f7cebf59bc0) event type 512, reply code 486 DEBUG: acc [acc_logic.c:443]: should_acc_reply(): probing acc state - code: 486 flags: 0x220 DEBUG: acc [acc_logic.c:449]: should_acc_reply(): failed acc is off am I configuring this wrong? cheers, Jon -- PekePBX, the multitenant PBX solution https://pekepbx.com

2 3

CentOS 7 and 8 deprecated
by Sergey Safarov 06 Jun '24

06 Jun '24

The CentOS project page shows that the 7 and 8 releases are deprecated. https://www.centos.org/ Does the Kamailio community use these releases for prod? If yes then I will keep the packaging for this release. If not, I will remove the packaging for 7 and 8 releases, and in the future Kamailio will be packaged for 9 and 10 releases (planned). https://www.phoronix.com/news/CentOS-Stream-10-Start https://composes.stream.centos.org/stream-10/development/latest-CentOS-Stre… https://composes.stream.centos.org/stream-10/development/latest-CentOS-Stre…

2 1

Assistance Needed: Converting 11-Digit US Numbers to E.164 in Kamailio
by Pavan Kumar 04 Jun '24

04 Jun '24

Hey everyone, I have the following setup: External User/Trunk <===> Kamailio <===> FreeSWITCH I have configured FreeSWITCH and Kamailio to work only with phone numbers in E.164 format. Recently, I needed to integrate a new SIP trunk that sends phone numbers in an 11-digit US format. My initial idea to solve this is to use Kamailio as a translator that converts 11-digit numbers to E.164 when sending to FreeSWITCH, and back to 11-digit when sending to the trunk. Before writing the code, I want to know if there is already a solution to this problem in one of the modules, so that I won't reinvent the wheel. Thanks, Pavan Kumar

7 11

DMQ_USRLOC and multiple domains
by Lợi Đặng 03 Jun '24

03 Jun '24

Hi, I'm setting up shared user location for 2 instances of kamailio via dmq_usrloc. Everything seems fine except my setup is multi-domains. The issue arises when the producer node produces the Contact of domain X, Contact of domain Y separately, but the consumer node stores both as the Contact of domain Y (seen in kamcmd ul.dump), in which Y is set in usrloc_domain. modparam("dmq_usrloc", "usrloc_domain", "{{domain_Y}}") modparam("usrloc", "use_domain", 1) ==== I had a quick ngrep and see the domain was put in the "aor" key of the body in KMQ message for usrloc {"action":1,"aor":"test_username_0dppxcl@$domain_X"} But I'm not sure how to make my consumer node to store the contact in appropriate domain. Any help will be appreciated. Thanks and regards, Loi Dang Thanh Phone : +84. 774.735.448 Email : loi.dangthanh(a)gmail.com

1 1

ACK and Bye not relaying when record_route is not used
by Arun K R 03 Jun '24

03 Jun '24

Issue : Not getting relay of ACK and BYE to the next hop after the call is answered my Scenario : Asterisk ------->kamailio sip proxy-------------------> carrier (outgoing call) My carrier is not allowed to send the SIP packet with Record-Route header. So that I have removed record_route(). After that the call is getting connected. I am getting 200 OK (SDP) from carrier side and forwarded that to the Asterisk on the other side. As a response I am getting ACK from asterisk. But the kamailio is not forwarding the ACK to the carrier side. I understood this is because the record-route is not there. The same thing is happening for BYE also. The Bye is not forwarding to carrier side. Kindly suggest me a solution for this for relaying ACK and bye without Record-Route in kamailio Bellow is the 200 OK SDP I am sending back to asterisk 2024/06/02 10:27:04.756610 103.155.114.101:5060 -> 103.182.153.113:5060 SIP/2.0 200 OK Call-ID: 1d2897fc-8ae2-4835-b7ac-a96cc28adcc2 Via: SIP/2.0/UDP 103.182.153.113:5060 ;received=103.182.153.113;rport=5060;branch=z9hG4bKPj463fedcf-6258-4655-a53d-58ea57f144af To: <sip:09496381412@103.155.114.101 >;tag=6541fd97-665bfb9a2aea9a78-gm-po-lucentPCSF-109109 From: <sip:917946357720@gaesip.teleforce.in >;tag=8dba28f5-d250-48c6-99fc-35d84590cfc1 CSeq: 22823 INVITE Allow: INVITE,BYE,REGISTER,ACK,OPTIONS,CANCEL,SUBSCRIBE,NOTIFY,INFO,REFER,UPDATE Contact: <sip:lucentNGFS-115804@10.5.110.117:5060 ;alias=10.5.110.117~5060~1;x-afi=11> Content-Type: application/sdp Session-Expires: 7200;refresher=uas Supported: timer Content-Length: 248 v=0 o=LucentPCSF 130227946 130227946 IN IP4 103.155.114.101 s=- c=IN IP4 103.155.114.101 t=0 0 m=audio 12806 RTP/AVP 8 101 ------------------------------------------------------------------------------------------------------- The ACK I am getting back from asterisk is 2024/06/02 10:27:04.760392 103.182.153.113:5060 -> 103.155.114.101:5060 ACK sip:lucentNGFS-115804@103.155.114.101:5060;alias=10.5.110.117~5060~1;x-afi=11 SIP/2.0 Via: SIP/2.0/UDP 103.182.153.113:5060 ;rport;branch=z9hG4bKPjb7299c25-13d3-484e-8e78-e7c83620edce From: <sip:917946357720@gaesip.teleforce.in >;tag=8dba28f5-d250-48c6-99fc-35d84590cfc1 To: <sip:09496381412@103.155.114.101 >;tag=6541fd97-665bfb9a2aea9a78-gm-po-lucentPCSF-109109 Call-ID: 1d2897fc-8ae2-4835-b7ac-a96cc28adcc2 CSeq: 22823 ACK Max-Forwards: 70 User-Agent: Asterisk PBX 18.13.0 Content-Length: 0 Thanks Arun

3 3

StriShaken module compilation
by Sergio Charrua 01 Jun '24

01 Jun '24

Hello all! I am struggling on compiling StriShaken module on RHEL 9.2. So far, the module was compiled as well as libstirshaken. Below are the steps used to compile (as sudo) both library and module (I hope this may help someone) and, of course, correct me if I am wrong in any step or if there is a better way. Also, note that the RHEL 9,2 is in a VM environment without access to the WWW, instead it uses Red Hat Satellite to download packages (via Yum or DNF), if available. Lib LibKS download libks from https://github.com/signalwire/libks unzip move to dir created by Unzip run yum groupinstall "Development Tools" dnf install libuuid-devel libatomic openssl-devel cmake . make make install cp /usr/lib/pkgconfig/libks2.pc /usr/lib64/pkgconfig/. For module LibStirShaken: download https://github.com/signalwire/libstirshaken unzip move to dir if using OpenSSL3.0 or + edit file configure.ac and add after line 28: if test x$HAVE_OPENSSL = x1; then openssl_CFLAGS="$openssl_CFLAGS -DHAVE_OPENSSL"; /* PATCH FOR OPENSSL3 */ AC_MSG_CHECKING([for OpenSSL >= 3.0.0]) AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <openssl/opensslv.h> #if OPENSSL_VERSION_PREREQ(3,0) #error "you_have_version_3" #endif ]], [[]])], [ AC_MSG_RESULT([no]) ], [ AC_MSG_RESULT([yes]); AC_DEFINE(OPENSSL_SUPPRESS_DEPRECATED, 1, [disable openssl deprecated-function warnings]) ]) /* END OF PATCH */ else AC_MSG_ERROR([OpenSSL >= 1.0.1e and associated developement headers required]) fi run configure make sudo make install next, move to dir /root/kamailio/kamailio-5.7.4/src/modules/stirshaken cd /root/kamailio/kamailio-5.7.4/src/modules/stirshaken ln -s /root/stirshakenlib/libks-master/src/include/libks libks make make install All seem to compile OK , *but* when starting Kamailio I get the following errors: May 29 17:42:02 kamailio1 kamailio[248991]: ERROR: <core> [core/sr_module.c:599]: ksr_load_module(): could not open module </usr/local/lib64/kamailio/modules/stirshaken.so>: libstirshaken.so.1: cannot open shared object file: No such file or directory May 29 17:42:02 kamailio1 kamailio[248991]: CRITICAL: <core> [core/cfg.y:3915]: yyerror_at(): parse error in config file /usr/local/etc/kamailio/kamailio_stir_shaken_mod.cfg, line 106, column 12-26: failed to load module I haven't found a solution for this. Can anyone help? Thanks in advance! *Sérgio Charrua*

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users June 2024